Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-3-ESaxkzW3ZQw38WPZJ_tsdHE4.roa
File: 1-3-ESaxkzW3ZQw38WPZJ_tsdHE4.roa (raw, json)
Hash identifier: IlFOdd5v1BJiEL8xIUBiJbErU1KPOlCPozVeygyf2QY=
Subject key identifier: FB:7F:84:49:AC:64:CD:6D:D9:43:0D:FC:58:F6:49:FE:DB:1D:1C:4E
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E028C27D4785B138565F5761BC1A5
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-3-ESaxkzW3ZQw38WPZJ_tsdHE4.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199794
IP address blocks: 195.187.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:02:8c:27:d4:78:5b:13:85:65:f5:76:1b:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb7f8449ac64cd6dd9430dfc58f649fedb1d1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:be:34:eb:4c:cc:00:12:e1:62:7a:07:49:
53:a4:9b:ef:ff:99:46:76:d2:68:1b:3f:15:04:04:
db:c5:eb:65:18:fd:a7:17:f7:99:06:86:95:bc:e6:
cc:24:d6:03:74:e7:9d:dd:5f:fa:6c:ce:78:a7:06:
97:8c:c8:8e:90:e4:90:81:f3:c1:3c:6e:96:50:28:
3c:5f:61:be:aa:6d:3b:f3:d2:70:b0:ce:66:fd:f2:
e1:e7:4b:56:00:8e:21:60:5e:06:af:07:53:53:fb:
ff:87:16:99:71:e9:d3:1f:91:b5:fd:e1:77:40:1e:
f6:f3:b7:7e:0f:64:be:c6:47:74:98:e8:5f:0c:5a:
9b:a5:f5:f8:bb:30:73:4d:1d:66:cb:3a:f7:8e:e3:
83:04:cd:98:92:f4:5f:18:c7:3e:2f:c1:52:88:07:
ca:49:1b:91:67:eb:5f:c5:00:85:42:68:db:b6:4a:
49:67:f9:9d:bb:b9:57:8d:d7:62:57:40:76:67:dd:
bb:8c:c3:c4:3d:c8:f7:ab:80:c3:ab:17:94:91:03:
a6:03:32:8a:6b:72:34:59:03:49:33:76:7a:2e:6e:
21:d4:ee:c8:8b:11:73:79:a7:4c:d7:b4:21:04:36:
3d:5c:63:ab:fe:08:0f:80:b8:15:15:52:f7:0f:3a:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:84:49:AC:64:CD:6D:D9:43:0D:FC:58:F6:49:FE:DB:1D:1C:4E
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-3-ESaxkzW3ZQw38WPZJ_tsdHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.159.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1d:b5:cd:6f:f2:01:aa:a4:63:92:09:b1:05:5d:6c:f4:68:
fc:28:33:ba:bf:48:70:d2:4c:0d:5d:39:a1:33:43:7d:e0:1c:
f7:8d:01:38:25:05:d6:b9:1b:ed:3f:58:49:ca:41:5d:3f:49:
d8:4d:ae:67:35:e2:28:5d:0b:3c:27:db:84:56:65:4a:5f:49:
94:18:f5:b5:44:e1:de:fd:e1:60:cd:74:5b:25:35:df:62:4b:
b9:cd:e3:80:82:49:a5:6c:5c:9f:78:1a:a6:1a:b6:d4:23:b0:
ab:98:8a:c8:5d:c2:cd:46:ea:03:13:23:7e:52:07:e7:e9:2d:
20:25:cd:82:16:e1:cf:1b:de:85:81:d9:60:34:2d:7f:04:3e:
36:8e:2c:bd:89:14:52:99:c2:2e:86:14:37:b7:74:34:34:05:
8a:13:ca:e8:f9:a6:3f:31:2c:dd:79:97:8b:6a:d7:bd:c8:b8:
22:e5:f3:4d:bb:1a:a5:ab:7d:e7:cc:65:5d:19:5e:61:4f:59:
a5:81:16:43:e4:7c:e1:e6:30:ef:4c:37:65:d7:8e:7d:0f:be:
d3:d8:1d:e9:d3:b5:9e:ee:9c:d9:95:22:20:63:8d:af:a1:a3:
dc:2f:cb:cf:dc:04:71:d1:68:aa:88:15:42:5d:37:18:7c:57:
b5:b4:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:08 2024 by rpki-client on console-fra.rpki-client.org